General

  • Target

    24664fc13e00e502aa5592fc8d1b3a4354178c1f4d374102fca5095142d72878

  • Size

    224KB

  • Sample

    241110-wv5gta1pht

  • MD5

    e8e3ff137eb8561277400c99665a67c0

  • SHA1

    634890d5010b7b8df59cd0603deeb862d49e3fd6

  • SHA256

    24664fc13e00e502aa5592fc8d1b3a4354178c1f4d374102fca5095142d72878

  • SHA512

    511770191dbb702b7ea8cdaf35ac45cd82ce223d909eb4f18973c6bc8ef433baa28ec298da55e67231a60825a86542bc1b87392636d36c6e6090038cf5d10d09

  • SSDEEP

    6144:D4YwAhNh5s6dQMN1wwsoUf6Io7RP2WFqeD9sramM:D4+bhd6kcXf6I+PoeDSrPM

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      24664fc13e00e502aa5592fc8d1b3a4354178c1f4d374102fca5095142d72878

    • Size

      224KB

    • MD5

      e8e3ff137eb8561277400c99665a67c0

    • SHA1

      634890d5010b7b8df59cd0603deeb862d49e3fd6

    • SHA256

      24664fc13e00e502aa5592fc8d1b3a4354178c1f4d374102fca5095142d72878

    • SHA512

      511770191dbb702b7ea8cdaf35ac45cd82ce223d909eb4f18973c6bc8ef433baa28ec298da55e67231a60825a86542bc1b87392636d36c6e6090038cf5d10d09

    • SSDEEP

      6144:D4YwAhNh5s6dQMN1wwsoUf6Io7RP2WFqeD9sramM:D4+bhd6kcXf6I+PoeDSrPM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks